Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Original file line number Diff line number Diff line change
Expand Up @@ -198,7 +198,7 @@
"Properties": {
"Content": {
"S3Bucket": "cdk-hnb659fds-assets-12345678-test-region",
"S3Key": "4c0f7bf9173df1c120604820692548150b09e29f6fba95f38b11caa17c9696bb.zip"
"S3Key": "c82567645316e1499ecd064c937f1183bb4a74e95800ff64fab4d308451ba5f0.zip"
},
"Description": "/opt/awscli/aws"
}
Expand Down

This file was deleted.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Large diffs are not rendered by default.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Original file line number Diff line number Diff line change
Expand Up @@ -199,7 +199,7 @@
"Properties": {
"Content": {
"S3Bucket": "cdk-hnb659fds-assets-12345678-test-region",
"S3Key": "4c0f7bf9173df1c120604820692548150b09e29f6fba95f38b11caa17c9696bb.zip"
"S3Key": "c82567645316e1499ecd064c937f1183bb4a74e95800ff64fab4d308451ba5f0.zip"
},
"Description": "/opt/awscli/aws"
}
Expand Down

This file was deleted.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Large diffs are not rendered by default.

This file was deleted.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{

Check failure on line 1 in packages/@aws-cdk-testing/framework-integ/test/aws-codepipeline-actions/test/integ.pipeline-commands.js.snapshot/aws-cdk-codepipeline-commands.template.json

View workflow job for this annotation

GitHub Actions / Security Guardian Results with resolved templates

codepipeline-cross-account-role-trust-scope.guard

CODEPIPELINE_CROSS_ACCOUNT_ROLE_TRUST_SCOPE for Type: Resolved
Raw output
Check was not compliant as property [Condition] is missing. Value traversed to [Path=/Resources/PipelineSourceCodePipelineActionRoleC6F9E7F5/Properties/AssumeRolePolicyDocument/Statement/0[L:586,C:12] Value={"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::123456789012:root"}}].
Check was not compliant as property [Condition.ArnEquals] is missing. Value traversed to [Path=/Resources/PipelineSourceCodePipelineActionRoleC6F9E7F5/Properties/AssumeRolePolicyDocument/Statement/0[L:586,C:12] Value={"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::123456789012:root"}}].
Check was not compliant as property [Condition.StringEquals] is missing. Value traversed to [Path=/Resources/PipelineSourceCodePipelineActionRoleC6F9E7F5/Properties/AssumeRolePolicyDocument/Statement/0[L:586,C:12] Value={"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::123456789012:root"}}].
Check was not compliant as property [Condition.StringLike] is missing. Value traversed to [Path=/Resources/PipelineSourceCodePipelineActionRoleC6F9E7F5/Properties/AssumeRolePolicyDocument/Statement/0[L:586,C:12] Value={"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::123456789012:root"}}].
Check was not compliant as property [Condition] is missing. Value traversed to [Path=/Resources/PipelineComputeCommandsCodePipelineActionRole992CFF18/Properties/AssumeRolePolicyDocument/Statement/0[L:663,C:12] Value={"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::123456789012:root"}}].
Check was not compliant as property [Condition.ArnEquals] is missing. Value traversed to [Path=/Resources/PipelineComputeCommandsCodePipelineActionRole992CFF18/Properties/AssumeRolePolicyDocument/Statement/0[L:663,C:12] Value={"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::123456789012:root"}}].
Check was not compliant as property [Condition.StringEquals] is missing. Value traversed to [Path=/Resources/PipelineComputeCommandsCodePipelineActionRole992CFF18/Properties/AssumeRolePolicyDocument/Statement/0[L:663,C:12] Value={"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::123456789012:root"}}].
Check was not compliant as property [Condition.StringLike] is missing. Value traversed to [Path=/Resources/PipelineComputeCommandsCodePipelineActionRole992CFF18/Properties/AssumeRolePolicyDocument/Statement/0[L:663,C:12] Value={"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::123456789012:root"}}].
Check was not compliant as property [Condition] is missing. Value traversed to [Path=/Resources/PipelineDeployDeployActionCodePipelineActionRole1C288A60/Properties/AssumeRolePolicyDocument/Statement/0[L:741,C:12] Value={"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::123456789012:root"}}].
Check was not compliant as property [Condition.ArnEquals] is missing. Value traversed to [Path=/Resources/PipelineDeployDeployActionCodePipelineActionRole1C288A60/Properties/AssumeRolePolicyDocument/Statement/0[L:741,C:12] Value={"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::123456789012:root"}}].
Check was not compliant as property [Condition.StringEquals] is missing. Value traversed to [Path=/Resources/PipelineDeployDeployActionCodePipelineActionRole1C288A60/Properties/AssumeRolePolicyDocument/Statement/0[L:741,C:12] Value={"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::123456789012:root"}}].
Check was not compliant as property [Condition.StringLike] is missing. Value traversed to [Path=/Resources/PipelineDeployDeployActionCodePipelineActionRole1C288A60/Properties/AssumeRolePolicyDocument/Statement/0[L:741,C:12] Value={"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::123456789012:root"}}].

Check failure on line 1 in packages/@aws-cdk-testing/framework-integ/test/aws-codepipeline-actions/test/integ.pipeline-commands.js.snapshot/aws-cdk-codepipeline-commands.template.json

View workflow job for this annotation

GitHub Actions / Security Guardian Results with resolved templates

guardhooks-no-root-principals-except-kms-secrets.guard

NO_ROOT_PRINCIPALS_EXCEPT_KMS_SECRETS for Type: Resolved
Raw output
Check was not compliant as property value [Path=/Resources/PipelineSourceCodePipelineActionRoleC6F9E7F5/Properties/AssumeRolePolicyDocument/Statement/0/Principal/AWS[L:590,C:23] Value="arn:aws:iam::123456789012:root"] equal to value [Path=[L:0,C:0] Value="/(?i):root$/"].
Check was not compliant as property value [Path=/Resources/PipelineComputeCommandsCodePipelineActionRole992CFF18/Properties/AssumeRolePolicyDocument/Statement/0/Principal/AWS[L:667,C:23] Value="arn:aws:iam::123456789012:root"] equal to value [Path=[L:0,C:0] Value="/(?i):root$/"].
Check was not compliant as property value [Path=/Resources/PipelineDeployDeployActionCodePipelineActionRole1C288A60/Properties/AssumeRolePolicyDocument/Statement/0/Principal/AWS[L:745,C:23] Value="arn:aws:iam::123456789012:root"] equal to value [Path=[L:0,C:0] Value="/(?i):root$/"].

Check failure on line 1 in packages/@aws-cdk-testing/framework-integ/test/aws-codepipeline-actions/test/integ.pipeline-commands.js.snapshot/aws-cdk-codepipeline-commands.template.json

View workflow job for this annotation

GitHub Actions / Security Guardian Results with resolved templates

iam-role-no-broad-principals.guard

IAM_ROLE_NO_BROAD_PRINCIPALS for Type: Resolved
Raw output
Check was not compliant as property value [Path=/Resources/PipelineSourceCodePipelineActionRoleC6F9E7F5/Properties/AssumeRolePolicyDocument/Statement/0/Principal/AWS[L:590,C:23] Value="arn:aws:iam::123456789012:root"] equal to value [Path=[L:0,C:0] Value="/(?i):root/"].
Check was not compliant as property value [Path=/Resources/PipelineComputeCommandsCodePipelineActionRole992CFF18/Properties/AssumeRolePolicyDocument/Statement/0/Principal/AWS[L:667,C:23] Value="arn:aws:iam::123456789012:root"] equal to value [Path=[L:0,C:0] Value="/(?i):root/"].
Check was not compliant as property value [Path=/Resources/PipelineDeployDeployActionCodePipelineActionRole1C288A60/Properties/AssumeRolePolicyDocument/Statement/0/Principal/AWS[L:745,C:23] Value="arn:aws:iam::123456789012:root"] equal to value [Path=[L:0,C:0] Value="/(?i):root/"].
"Resources": {
"SourceBucketKey79929454": {
"Type": "AWS::KMS::Key",
Expand Down Expand Up @@ -207,7 +207,7 @@
"S3Bucket": {
"Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
},
"S3Key": "4c0f7bf9173df1c120604820692548150b09e29f6fba95f38b11caa17c9696bb.zip"
"S3Key": "c82567645316e1499ecd064c937f1183bb4a74e95800ff64fab4d308451ba5f0.zip"
},
"Description": "/opt/awscli/aws"
}
Expand Down

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading